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(g) Franking machine with digital printer. 

@ A franking machine is disclosed in which a 
digital printing device (15) such as a thermal 
printer or ink jet printer Is connected to ac- 
counting circuits (10) of the franking machine 
so as to be controlled thereby to print franking 
impressions. In order to prevent unauthorised 
control of the printing device (15) by application 
of external print signals, print data signals out- 
put by the accounting circuit (10) are encrypted 
by logically combining (26) the signals with 
pseudo random strings (23) of binary bits. At the 
printing device (15) the encrypted print data 
signals are decrypted by logically combining 
(29) the encrypted print data signals with a 
corresponding pseudo random string (27) of 
binary bits to provide print signals to control the 
printing device. Connections (18) between the 
decryption circuit (21) and the print head (15) 
are protected from unauthorised access. 
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This invention relates to franking machines in 
which a digital printing device is utilised to print a 
franking impression and in particular to providing se- 
curity for print data signals which control operation of 
the printing device. 5 

In known franking machines which are currently 
in use for franking mail items to indicate that postage 
charges in respect of those items has been accounted 
for, the printing of the franking impression is carried 
out by means of a print drum which carries a print die 10 
to print the fixed pattern of the impression and carries 
print wheels to print variable information. The variable 
information includes the value of the postage charge 
for the item and the date of franking the item. The print 
wheels each have a series of type characters on the 15 
periphery thereof and are settable to locate a selected 
one of the characters in an operative printing position 
whereby printing of the desired postage charge and 
date is effected. The print wheels are set to the re- 
quired positions by mechanisms operated either di- 20 
rectly by value setting levers or thumb wheels operat- 
ed by a user of the franking machine or by stepper mo- 
tors controlled by electrical drive signals in depend- 
ence upon positioning of thumb wheels or operation 
of keys of a keyboard by a user of the machine. The 25 
positions of the levers or thumb wheels are sensed by 
encoders to provide electrical signals representing a 
selected postage value to electronic accounting cir- 
cuits to enable accounting functions to be performed 
in relation to the selected postage value. In franking 30 
machines having a postage meter which operates in 
a pre-payment mode, a descending register in the me- 
ter stores a value of credit available for use in franking 
mail items with postage charge values and each time 
a mail item is franked the credit value In the descend- 35 
ing register is decremented by the amount of the post- 
age charge value for that item. The postage meter 
also includes an ascending register to store an accu- 
mulated value of postage charge used by the meter 
in franking mail items and is incremented by the value 40 
of postage charge as each item is franked. A further 
register stores a count of the number of items franked 
by the machine and is incremented by one each time 
an item is franked. Accordingly the accounting infor- 
mation stored in the reg isters provides a record of the 45 
postage used in franking mail items and the amount 
of credit which remains available for use in franking 
mail items. As is well known in franking machines the 
electronic accounting circuits are housed in a secure 
housing to inhibit unauthorised and fraudulent at- so 
tempts to tamper with the accounting data and with 
operation of the postage meter. While the surface of 
the print drum and the selected type characters of the 
print wheels are exposed, the mechanisms for setting 
the print wheels are contained within the print drum 55 
and extend through an arbour for the drum into the se- 
cure housing of the meter. Accordingly the setting 
mechanisms are protected from unauthorised tam- 



pering and the setting mechanisms are so construct- 
ed as to prevent changing of the setting of the print 
wheels by applying force directly to the print wheels. 
Thus the known mechanical printing devices used in 
franking machines prevent unauthorised re-setting of 
the printing elements. 

In franking machines currently being developed, 
it is desired to use non-mechanical digital printing de- 
vices such as Inkjet print heads or thermal print heads 
operated directly by electrical signals which define 
the information both fixed and variable to be printed 
by the printing device to constitute the franking im- 
pression. Such printing heads need to be connected 
by electrical conductors to the accounting and control 
circuits of the franking machine in order to receive the 
electrical signals which are to control and selectively 
operate the print head. Accordingly it is necessary to 
prevent unauthorised application of electrical signals 
on these connecting conductors or to a print data sig- 
nal input of the printing device resulting in operation 
of the printing device to print a franking impression. 

According to the invention a franking machine in- 
cludes electronic accounting and control circuits and 
a digital printing device operable by print data signals 
comprising binary bits generated by the accounting 
and control circuits to print franking impressions in- 
cluding a representation of a postage charge means 
to transmit the print data signals from the accounting 
and control circuits, to the digital printing device in- 
cluding encryption means at the accounting and con- 
trol circuits comprising a first generator to generate a 
first pseudo random string of binary bits and means 
to logically combine successive bits of the first pseu- 
do random string with bits of the print data signals to 
produce encrypted print data signals and decryption 
means at the printing device comprising a second 
generator to generate a second pseudo random string 
of binary bits corresponding to said first pseudo ran- 
dom string of binary bits and means to combine suc- 
cessive bits of the second pseudo random string of bi- 
nary bits with bits of the encrypted print data signals 
to reproduce the bits of the print data signals to oper- 
ate the printing device. 

An embodiment of the invention will now be de- 
scribed by way of example with reference to the draw- 
ings in which 

Figure 1 is a block diagram of electronic account- 
ing and control circuits and a digital printing de- 
vice of a franking machine in which signals for 
controlling the printing device are transmitted ser- 
ially, and 

Figure 2 is a similar block diagram in which sig- 
nals for controlling the printing device are trans- 
mitted in parallel. 

Referring to Figure 1 of the drawing, electronic 
accounting and control circuits for a franking machine 
are constituted in well known manner by a micropro- 
cessor 10 to which required command signals and 
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postage value signals are Input by means of keyboard 
11. A display device 12 is provided for the display of 
information to a user of the franking machine. Non- 
volatile memory devices 13, 14 are provided for the 
storage of accounting data. Each memory 13, 14 in- 5 
eludes a descending register for storing a value of 
credit available for use In franking of mail items, an as- 
cending tote register for storing an accumulated value 
of postage used in franking mail items by the franking 
machine, an items count register for storing a count of 10 
the number of items franked and a high items register 
to store a count of the number of items franked with a 
postage charge in excess of a predetermined value. 
The registers are duplicated in each of the memory 
devices 13, 14 In order to enable verification of the in- 15 
tegrity of stored accounting data. 

A digital printing device 34 is provided for printing 
franking impress tons on mail items. The printing de- 
vice comprises a print head 15 having a plurality of 
print elements arranged in a line and which can be se- 20 
lectively operated to print a plurality of dots in each of 
a plurality of print cycles to build up a franking impres- 
sion line by line in successive print cycles. The print 
elements may be ink jet devices or thermal print ele- 
ments of a thermal print head. However other forms 25 
of printing device in which elements are operated se- 
lectively by means of a string of print data signals may 
be used. The print elements are connected to corre- 
sponding memory locations of a print buffer register 
1 6 into which a string of print data bits is entered ser- 30 
ially. The bits of the print data string represent a dot 
pattern to be printed in a line by the print elements in 
a single print cycle and for example a binary one may 
represent a dot to be printed and a binary zero may 
represent a space in which a dot is not to be printed, zs 
When the string of print data has been entered into the 
buffer register 16, a strobe signal on a line 17 causes 
operation of the print elements in dependence upon 
the binary values In the memory locations of the buf- 
fer register corresponding to the print elements. The 40 
strings of print data signals are input serially to the 
buffer register 16 on line 18 arid are clocked into the 
register by means of clock signals received from the 
microprocessor 10 on line 19. 

It will be appreciated that unauthorised printing of 45 
a franking impression could be effected by applying 
appropriate strings of print signals to the line 1 8 while 
the print elements are strobed by strobe signals on 
line 17. In order to prevent such unauthorised opera- 
tion of the printing device the print data signals output so 
by the microprocessor 1 0 are encrypted prior to trans- 
mission to the printing device. The encrypted print 
data signals are carried by a line 20 and are input to 
a decryption circuit 21 of the printing device. Decrypt- 
ed print data signals output from the decryption circuit 55 
21 are input to the print buffer register 16 on line 18. 
The line 18 connecting the output of the decryption 
circuit 21 to the input of the buffer register is securely 



protected to prevent unauthorised application of sig- 
nals to the input of the buffer register. Accordingly the 
encryption circuit is mounted in close proximity to the 
buffer register so that the connection 18 therebetw- 
een is as short as is practicable and preferably is en- 
capsulated. Where practical, the encryption circuit 21 
may be physically bonded to the buffer register 1 6 by 
encapsulation therewith. 

The print data signals output by the microproces- 
sor 10 on line 24 are encrypted by an encryption cir- 
cuit 22 by logically combining the string of print data 
signals with the output 28 from a pseudo random sig- 
nal generator 23. The output 28 of the generator 23 
comprises a pseudo random string of binary bits and 
this is combined in a gate 26 with a string of print data 
signals output by the microprocessor 1 0 to produce a 
corresponding string of encrypted print data signals 
output from the gate 26 onto line 20. The encrypted 
print data signals are decrypted by means of the de- 
cryption circuit 21 which is identical to the encryption 
circuit 22 and comprises a pseudo random signal gen- 
erator 27. The pseudo random string of binary bits 
output on connection 30 from the generator 27 is com- 
bined in a gate 29 with the string of encrypted print 
data signals received on line 20 to produce at the out- 
put of the gate 29 on connection 1 8a string of decrypt- 
ed print data signals corresponding to those output by 
the microprocessor on line 24 to the encryption circuit 
22. 

It will be understood that the pseudo random gen- 
erators 23, 27 are maintained in synchronism by dock 
signals on the line 19. While the pseudo random gen- 
erators may be clocked at the bit rate of the print data 
stream as shown in the drawing, if desired the pseudo 
random generators may be clocked by clock signals 
at a rate which is a fraction of the bit rate at which the 
print data signals are clocked so that each bit from the 
pseudo random generators of the encryption circuit 
and decryption circuit would be combined with a num- 
ber, greater than one, of print data signals in succes- 
sion. 

The encryption circuit 22 may be constituted by 
circuit components specifically provided to carry out 
this function as described hereinbefore or if desired 
the encryption of the print data signals may be effect- 
ed by the microprocessor 10 operating under a pro- 
gram routine to emulate the operation of such a spe- 
cific encryption circuit 

Accordingly it will be understood that the print 
data signals are encrypted and the encrypted print 
data signals are decrypted by logically combining cor- 
responding pseudo random strings of binary bits with 
the strings of print data signals and encrypted print 
data signals respectively, the pseudo random strings 
of bits being maintained in synchronism with each 
other. 

While hereinbefore there has been described a 
franking machine in which a single serial string of print 



3 



5 



EP0 522 809 A2 



6 



data signals is output by the accounting and control 
microprocessor 10 on a single line 24, it is to be un- 
derstood that the invention may also be utilised to en- 
crypt and decrypt print data signals which are output 
in parallel on a plurality of lines 24, - 24 n as shown in s 
Figure 2. Successive bits of print data on each line are 
logically combined in a plurality of gates 26, -26^ one 
for each line 24, - 24 n , with successive bits of the 
pseudo-random string of bits from the generator 23 to 
produce encrypted parallel print data bits on parallel 10 
lines 20, - 20„. These encrypted data bits output from 
the gates are transmitted by means of the plurality of 
lines to one input of a plurality of gates 29, - 29 n re- 
spectively at the printing device 34. The other inputs 
of the gates 29, - 29 n at the printing device receive the 15 
pseudo random string of bits from generator 27 to de- 
crypt the encrypted print data signals into print data 
signals which are input in parallel on lines 18, - 18 n to 
the buffer store 16 of the printing head. The same 
pseudo random string of bits from generator 23 may 20 
be input in common to all the gates 26, - 26 n and sim- 
ilarly the same pseudo random string of bits from gen- 
erator 27 is input in common to all the gates 29, - 29 n . 
However if desired different pseudo random strings 
may be input to the gates provided that corresponding 25 
gates 26, - 26 n and 29, - 29 n receive the same pseudo 
random strings. That is to say gates 26, and 29, re- 
ceive the same pseudo random strings, gates 26 2 and 
29 2 receive the same pseudo random strings and so 
on. It will be understood that, in a similar manner to the 30 
secure protection of the single connection 18 of the 
serial embodiment shown in Figure 1, the plurality of 
connections 16, - 18 n of the embodiment shown in 
Figure 2 are securely protected from unauthorised ac- 
cess. 35 

The term digital printer used hereinbefore is to be 
understood to include not only printing devices such 
as ink jet and thermal printers in which dots are print- 
ed selectively at selected positions on mail items to 
build up required printed impressions but also other 40 
forms of printing device in which impressions or visual 
patterns are formed on mafl items by selective oper- 
ation of a plurality of elements. The operation of the 
elements may produce dots or other shaped patterns 
and may for example produce segments of characters 45 
required to be formed on the mail items. 



Claims 

50 

1. A franking machine including electronic account- 
ing and control circuits (10) and a digital printing 
device (15) operable by print data signals com- 
prising binary bits generated by the accounting 
and control circuits to print franking impressions 59 
including a representation of a postage charge 
and means to transmit the print data signals from 
the accounting and control circuits to the digital 



printing device characterised by encryption 
means (22) at the accounting and control circuits 
(10) comprising a first generator (23) to generate 
a first pseudo random string of binary bits and 
means (19) to logically combine successive bits 
of the first pseudo random string with bits of the 
print data signals to produce encrypted print data 
signals and decryption means (21) at the printing 
device (1 5) comprising a second generator (27) to 
generate a second pseudo random string of bina- 
ry bits corresponding to said first pseudo random 
string of binary bits and means (29) to combine 
successive bits of the second pseudo random 
string of binary bits with bits of the encrypted print 
data signals to reproduce the bits of the print data 
.signals to operate the printing device (15). 

2. A franking machine as claimed in claim 1 further 
characterised by an electrical connection (18) 
connecting an output of the decryption means 
(21) to the printing device (15) and in that said 
electrical connection (18) is securely protected to 
inhibit unauthorised access thereto. 

3. A franking machine as claimed in claim 2 further 
characterised in that the decryption means (21) 
and the printing device (15) are constructed to in- 
hibit direct access to the electrical connection 
(18). 

4. A franking machine as claimed in any preceding 
claim further characterised in that the logical 
combination of the print data signals with the 
pseudo random string of binary bits in the encryp- 
tion means (22) is effected by a first logic gate 
(26). 

5. A franking machine as claimed in any preceding 
claim further characterised in that the logical 
-combination of the encrypted print data signals 
with the second pseudo random string of binary 
bits in the decryption means (21) is effected by 
means of a second logic gate (29). 

6. A franking machine as claimed in any preceding 
claim further characterised in that the accounting 
and control circuits include a microprocessor (10) 
operating under control of a program routine to 
generate the first pseudo random string of binary 
bits and to logically combine the binary bits of 
said pseudo random string with binary bits of the 
print data signals. 

7. A franking machine as claimed in any preceding 
claim further characterised in that the print data 
signals comprise a plurality of bits in parallel. 

8. A franking machine as claimed in claim 7 further 
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characterised in that the encryption means (22) 
logically combines parallel bits of the print data 
signals with the bits of the first pseudo-random 
string to produce parallel bits of the encrypted 
data signals and wherein the decryption means 5 
(21) logically combines the parallel bits of the en- 
crypted data signals with the bits of the second 
pseudo-random string. 
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